What’s Vulnerable › Vulnerabilities

CVE-2023-26609

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 38.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-02-27 · updated 2026-06-17

Description

ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wireless_mft ap field.

Affected products

• Abus Tvip 20000-21150 Firmware: all versions

References

• http://packetstormsecurity.com/files/171136/ABUS-Security-Camera-TVIP-20000-21150-LFI-Remote-Code-Execution.html
• http://seclists.org/fulldisclosure/2023/Feb/16
• https://nwsec.de/NWSSA-001-2023.txt
• http://packetstormsecurity.com/files/171136/ABUS-Security-Camera-TVIP-20000-21150-LFI-Remote-Code-Execution.html
• http://seclists.org/fulldisclosure/2023/Feb/16
• https://nwsec.de/NWSSA-001-2023.txt

Get alerted when CVE-2023-26609 or the next vulnerability affects your stack